• A Treatise on Writing Packet Parsers for the RSA NetWitness Platform

    PARSERS - A Treatise on Writing Packet Parsers for RSA NetWitness   If you're interested in learning to write your own custom packet parsers, this is the information you need.  It covers parser writing from...
    William Motley
    last modified by William Motley
  • Log Parser Customization

    On occasion, you may need to modify one or more of your log parsers. For example, you may need to fix an unknown message, or to parse certain fields differently than in the manner provided by default. Log Parser Cust...
    RSA Information Design and Development
    last modified by RSA Product Team
  • Context Hub Lists in ESA Rules

        For RSA NetWitness Platform 11.1 and later, ESA Rules can use Context Hub (CH) Lists as whitelists and blacklists in their construction and processing. To see details about these rules, see RSA E...
  • RSA Investigation Meta

      This table lists all of the delivered RSA NetWitness Investigation meta.                      ...
  • Content Quick Start Guide

        This topic discusses configuration procedures for getting RSA NetWitness Platform set up initially in your environment. Sections: Configuring Services Deploying Content Developing Content Ma...
  • Custom CEF Parser

        This topic discusses and describes the custom CEF parser (cef-custom.xml), that overrides the standard, base CEF (Common Event Format) parser. Context Customers need the ability to customize the ke...
  • JSON Development Guide

    Scott Marcus
    last modified by Scott Marcus